Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier: yHmiTwc/DPb+ijUw58FSfhriGExB8GVF68UbRcU1xIg=
Subject key identifier: DB:36:2E:F0:3A:DF:9C:0B:FF:70:93:68:E9:C6:8C:97:87:C6:4C:F0
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial: 019650B611D1F5B951182BBADCFFB3C38CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number: 0C08
Signing time: Sun 20 Apr 2025 01:00:31 +0000
Manifest this update: Sun 20 Apr 2025 01:00:31 +0000
Manifest next update: Mon 21 Apr 2025 01:00:31 +0000
Files and hashes: 1: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: FjkpG2KQpyIGrk6MsEFE5Hg+hGYmIX13xbgXlMGeJHU=)
2: dejiYWXpVyt-n4zSW5_bBe-6r0A.roa (hash: S+DqE/3RRz1xoArghf5VPCEdg1QAxwIn8VFz5upxaGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:11:d1:f5:b9:51:18:2b:ba:dc:ff:b3:c3:8c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Validity
Not Before: Apr 20 01:00:31 2025 GMT
Not After : Apr 21 01:00:31 2025 GMT
Subject: CN=db362ef03adf9c0bff709368e9c68c9787c64cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:1d:f9:20:63:a9:d4:72:14:d9:82:b7:f0:
e2:d7:c3:80:0e:03:6a:a9:13:71:9f:db:2e:a4:12:
65:04:05:18:96:1e:89:07:9d:8a:b0:51:ab:cc:7e:
44:0c:09:86:6a:6b:53:d8:de:9b:2b:fe:b3:eb:67:
ce:17:d4:d4:17:a6:37:7b:01:f3:44:00:45:a1:53:
40:7d:33:68:6a:4a:8f:9b:74:f5:ab:8c:e4:05:fc:
76:04:e5:87:c5:f3:be:d4:e8:cd:8c:a3:75:8f:81:
fb:59:92:da:c6:25:3a:f9:93:7b:91:27:cf:a2:83:
52:d1:b3:dc:46:76:f7:d8:66:d1:b2:99:11:da:50:
4b:7f:97:0f:a6:85:53:72:a0:78:b7:cc:8e:2e:6f:
c7:e4:5a:d0:c7:82:69:31:bb:52:68:65:f1:d9:48:
b4:d1:f2:c7:10:d7:e4:6c:cb:e3:8c:04:5b:b7:45:
e8:a3:51:3d:22:9f:a9:7a:44:9d:6e:0f:62:01:7c:
1d:7e:a6:cb:c3:9f:b3:32:04:6b:44:12:5c:cc:1c:
57:3b:cb:92:0e:b3:68:5f:09:7e:c8:40:48:95:95:
9b:97:1c:6d:a3:1f:5d:cd:87:89:52:4b:10:87:34:
f9:e7:93:f2:ef:b3:63:41:3c:86:a6:ce:97:50:19:
1a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:36:2E:F0:3A:DF:9C:0B:FF:70:93:68:E9:C6:8C:97:87:C6:4C:F0
X509v3 Authority Key Identifier:
keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:66:99:aa:2c:e9:c4:41:a6:b8:86:e6:64:09:4e:a1:ef:f5:
ee:9d:5d:71:c5:cc:58:ef:86:13:1f:ed:ca:eb:ed:8a:99:64:
ad:69:89:1a:9f:ff:87:36:3f:99:8e:87:13:5e:f2:66:80:f9:
e7:4c:26:74:fa:1c:bd:48:0d:17:c0:ca:ce:c1:e0:60:b4:9f:
1d:81:2d:3b:8f:db:7a:24:a9:9d:f7:e7:bc:3a:45:72:96:79:
cf:cf:b7:da:74:5b:80:4f:6d:ac:1f:23:81:35:47:85:90:e8:
e9:ec:48:14:3d:83:c5:c4:56:29:03:6e:a4:a2:7e:8b:fa:ea:
3b:85:31:8b:b4:c6:cc:b4:f7:07:8a:fd:f5:7b:6a:a9:ac:48:
70:cf:67:cb:c1:28:0c:26:dc:c3:ac:d6:36:9c:5d:e3:8c:8f:
8c:de:28:79:33:34:db:f9:14:56:df:56:72:c1:81:78:43:00:
cf:12:c3:47:5a:ef:58:3b:79:7b:ab:38:26:e3:e1:82:65:6d:
ac:87:07:51:9d:7c:79:c7:22:fd:64:85:0e:4f:0a:46:d7:00:
ec:a4:89:e7:12:3a:a0:b2:ce:bf:20:04:88:9d:85:8d:ca:dd:
2d:f5:f5:0f:fe:94:9b:4a:99:f3:8b:04:d1:6e:8e:93:2d:48:
9b:d2:14:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:04:27 2025 by rpki-client